11703 matches found
CVE-2020-4759
IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736...
Fedora 32 : salt (2020-f9fa7892f2)
Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it ...
Fedora 31 : salt (2020-9e040bd6dd)
Update to CVE release 3001.3-1 for Python3 Includes fixes for CVE-2020-16846, CVE-2020-17490, CVE-2020-25592 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it ...
Moxa MXView installation File Permission System Authorization Issues Vulnerability
Moxa MXView is a software from Moxa Taiwan, China specialized in managing networks. The software can be used to perform operations such as configuration processing for all devices within the network. An authorization issue vulnerability exists in the file permission system in Moxa MXView...
libssh: unsanitized location in scp could lead to unwanted command execution
A flaw was found with the libssh API function sshscpnew. A user able to connect to a server using SCP could execute arbitrary command using a user-provided path, leading to a compromise of the remote target...
PT-2020-19391
Name of the Vulnerable Software and Affected Versions Aruba Airwave Software versions prior to 1.3.2 Description A remote execution of arbitrary commands issue was discovered. This allows for the execution of arbitrary commands, potentially leading to unauthorized access and control...
RHEL 8 : python38:3.8 (RHSA-2020:4641)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4641 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
CVE-2018-19025
In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc...
CVE-2018-19025
CVE-2018-19025 affects JUUKO K-808 (and related JUUKO hardware). A vulnerability exists in the handling of radio data between transmitter and receiver that allows an attacker to craft a packet encoding an arbitrary command, enabling command injection on vulnerable installations. Red Hat/ZDI and I...
CVE-2018-19025: Authentication Bypass by Capture-replay
In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc...
Synology Router Manager Access Control Error Vulnerability (CNVD-2020-60456)
Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An access control error vulnerability exists in Synology Router Manager SRM versions prior to 1.2.4-8081, which stems from an improper access control vulnerability in lbd...
CVE-2020-7384
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine...
CVE-2020-7384
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine...
CVE-2020-7384
Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine...
PT-2020-19586
Name of the Vulnerable Software and Affected Versions Metasploit msfvenom framework affected versions not specified Description The issue allows a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine, due to the way Rapid7's Metasploit msfvenom...
CVE-2020-15272
The CVE-2020-15272 entry concerns the git-tag-annotation-action (open source GitHub Action) prior to version 1.0.1. Affected logic allows an attacker to execute arbitrary shell commands if they control the tag input or can alter the GITHUB_REF environment variable. The issue is patched in version...
UCMS Command Execution Vulnerability
UCMS is a content management system written in PHP. UCMS v1.4.8 version of the existence of command execution vulnerability, the vulnerability stems from the file written fopen function there are arbitrary command execution vulnerability, an attacker can take advantage of the vulnerability can be...
PT-2020-15782
Name of the Vulnerable Software and Affected Versions Aruba Airwave Software versions prior to 1.3.2 Description A remote execution of arbitrary commands issue was discovered. Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue...
